Skip to contentRabbitmq vulnerabilities
Newest
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Monitoring-tag user can restart federation linksCVE-2026-66075Fix available2.3 Low
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: ReDoS via management API ?name= filterCVE-2026-66074Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Atom table exhaustion via management API node fieldCVE-2026-66073Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Atom table exhaustion via stream `chunk_selector`CVE-2026-66072Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope valuesCVE-2026-66071Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: CORS * reflects Origin with Allow-CredentialsCVE-2026-66070Fix available7.6 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Monitoring-tag DELETE of auth-attempt metricsCVE-2026-66069Fix available2.3 Low
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Shovel DEBUG log of full state exposes decrypted URIsCVE-2026-66068Fix available5.6 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stream protocol skips per vhost per user connection limitsCVE-2026-66067Fix available6.0 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checksCVE-2026-61837Fix available6.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular ExpressionCVE-2026-67413Fix available6.0 Medium
- rabbitmq rabbitmq-java-clientRabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcementCVE-2026-75516Fix available8.7 High
- rabbitmq amqp091-goRabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel BlockingCVE-2026-77409Fix available8.2 High
- rabbitmq amqp091-goRabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstrCVE-2026-77411Fix available9.5 Critical
- rabbitmq amqp091-goRabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP ClientCVE-2026-77412Fix available8.9 High
- rabbitmq amqp091-goRabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI ParserCVE-2026-77405Fix available9.4 Critical
- rabbitmq amqp091-goRabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter InjectionCVE-2026-77404Fix available8.7 High
- rabbitmq amqp091-goRabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer AllocationCVE-2026-77410Fix available8.9 High
- rabbitmq amqp091-goRabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos ConfigurationCVE-2026-77406Fix available8.2 High
- rabbitmq amqp091-goRabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size NegotiationCVE-2026-77403Fix available8.9 High
- rabbitmq amqp091-goRabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct FieldsCVE-2026-77407Fix available7.0 High
- rabbitmq amqp091-goRabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer OverflowCVE-2026-77408Fix available9.1 Critical
- rabbitmq amqp091-goamqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized PayloadCVE-2026-79921Fix available8.9 High
- rabbitmq rabbitmq-java-clientRabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_maxCVE-2026-61634Fix available0.0 None
- rabbitmq rabbitmq-java-clientRabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITMCVE-2026-63336Fix available5.1 Medium
- rabbitmq rabbitmq-java-clientRabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loadingCVE-2026-63337Fix available7.5 High
- rabbitmq rabbitmq-java-clientRabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoSCVE-2026-69220Fix available8.7 High
- rabbitmq rabbitmq-java-clientRabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocationCVE-2026-69219Fix available8.7 High
- rabbitmq rabbitmq-java-clientRabbitMQ Java client malformed body frame triggers raw command assembler exceptionCVE-2026-63335Fix available6.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Topic authorization can lead to cross-tenant routing-key bypassCVE-2026-57217Fix available7.0 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged usersCVE-2026-57221Fix available5.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantomCVE-2026-57215Fix available7.0 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurationsCVE-2026-57219Fix available8.7 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosureCVE-2026-57218Fix available4.9 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checksCVE-2026-57216Fix available6.8 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoSCVE-2026-57220Fix available7.5 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stored XSS in RabbitMQ management UICVE-2026-57214Fix available7.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: UNC SSRF affecting the management UI on WindowsCVE-2026-57211Fix available6.5 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_sizeCVE-2026-57212Fix available7.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag renderingCVE-2026-57213Fix available5.7 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unsanitized vhost names allow for XSS in management UICVE-2026-44839Fix available5.6 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ MQTT Topic Permission Authorization BypassCVE-2026-44838Fix available5.3 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ Node can log Basic Auth header from an HTTP requestCVE-2025-50200Fix available6.7 Medium
- rabbitmq rabbitmq-serverRabbitMQ has XSS Vulnerability in an Error Message in Management UICVE-2025-30219Fix available6.1 Medium
- rabbitmq rabbitmq-serverHTTP API's queue deletion endpoint does not verify that the user has a required permissionCVE-2024-51988Fix available6.5 Medium
- vmware rabbitmq, rabbitmq rabbitmq-server +1 moreDenial of Service by publishing large messages over the HTTP APICVE-2023-46118Fix available4.9 Medium
- vmware rabbitmq java client, rabbitmq rabbitmq-java-client +1 moreRabbitMQ Java client's lack of message size limitation leads to remote DoS attackCVE-2023-46120Fix available4.9 Medium
- rabbitmq rabbitmq-server, vmware rabbitmq, broadcom rabbitmq server +2 morePredictable credential obfuscation seed value used in rabbitmq-serverCVE-2022-31008Fix available5.5 Medium
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation management pluginCVE-2021-32719Fix available3.1 Low
- rabbitmq rabbitmq-server, vmware rabbitmq +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UICVE-2021-32718Fix available3.1 Low
- Show moreLoading…